CISA Alerts on Critical Ray Project Code Injection Vulnerability

CISA has added CVE-2025-62593, a critical code injection vulnerability in the Ray Project, to its Known Exploited Vulnerabilities catalog due to confirmed exploitation in the wild. This flaw allows for remote code execution on systems running vulnerable Ray development environments, which are widely used in AI and machine learning applications. The vulnerability was published on November 26, 2025, and a proof of concept was made available the following day. The active exploitation was confirmed on August 17, 2026, prompting urgent advisories for affected users. The Ray Project is an open-source distributed computing framework popular among Python developers and AI teams. Organizations using Ray are advised to assess their systems for this vulnerability and apply necessary mitigations.

Key Points: • CVE-2025-62593 is a critical code injection vulnerability in the Ray Project. • Active exploitation of this flaw has been confirmed, allowing remote code execution. • CISA added this vulnerability to its KEV catalog on August 17, 2026.